Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/A24viOVshqQ2o8THq3cPp4vGhso.cer
File: A24viOVshqQ2o8THq3cPp4vGhso.cer (raw, json)
Hash identifier: KFdrGKkhlm9/zvaotD2Fmo2Q8oppiUmidfwg61krAJ0=
Subject key identifier: 03:6E:2F:88:E5:6C:86:A4:36:A3:C4:C7:AB:77:0F:A7:8B:C6:86:CA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019334CEF2C859677B4B7CFF039559C86740
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/b277449f-31b2-4578-a872-4b6e1340504f/0/036E2F88E56C86A436A3C4C7AB770FA78BC686CA.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/b277449f-31b2-4578-a872-4b6e1340504f/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sat 16 Nov 2024 11:49:58 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 214501
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:34:ce:f2:c8:59:67:7b:4b:7c:ff:03:95:59:c8:67:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 16 11:49:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=036e2f88e56c86a436a3c4c7ab770fa78bc686ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f9:c2:ee:cb:6d:a6:d4:fb:d4:27:f4:83:15:
4c:3c:48:6b:55:d8:4b:4b:da:b2:e6:c6:26:a9:87:
99:9e:00:41:8e:cc:79:71:49:31:22:fb:d7:53:e6:
10:52:66:55:8f:62:2d:f3:14:b2:e7:86:39:80:6a:
f2:e4:1c:32:10:c3:0a:e9:58:d2:86:68:48:eb:b6:
f4:c8:7a:85:b1:fe:6e:55:92:81:03:7f:15:9e:c5:
d2:8b:86:b7:fa:28:c4:7b:6a:53:cb:36:fa:9a:bd:
c1:41:54:05:3d:98:1a:37:12:25:35:b0:36:63:35:
16:f8:d8:49:9e:ae:08:19:aa:04:6a:59:44:1b:47:
4d:93:b7:df:db:17:61:35:ca:7d:91:18:ac:da:28:
22:d4:cd:23:a3:36:c0:fc:b5:48:17:2a:49:cf:59:
8a:8d:e0:c0:57:66:29:3e:e9:55:20:e8:74:3c:81:
46:22:73:c6:02:7f:8c:cb:d8:4a:29:53:a9:c4:56:
71:ce:0f:54:82:60:14:d3:9f:c3:f6:b0:4d:fe:7d:
bd:f1:47:6c:71:2d:c1:0d:ba:26:ba:5e:84:55:1d:
3c:52:f1:6c:56:9d:61:0a:0c:09:83:a8:1c:d6:fa:
69:3a:f8:3f:01:b4:d8:58:d3:98:92:ec:63:5d:77:
30:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:6E:2F:88:E5:6C:86:A4:36:A3:C4:C7:AB:77:0F:A7:8B:C6:86:CA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/b277449f-31b2-4578-a872-4b6e1340504f/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/b277449f-31b2-4578-a872-4b6e1340504f/0/036E2F88E56C86A436A3C4C7AB770FA78BC686CA.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214501
Signature Algorithm: sha256WithRSAEncryption
4a:bb:1e:89:d2:a3:a4:0f:b4:76:51:00:ba:9d:79:10:a2:8a:
b8:60:bb:37:9b:79:de:9c:03:fd:af:65:f6:a6:55:4b:32:3c:
7d:d0:18:5d:e5:ac:98:67:51:e9:f2:68:b4:cd:a0:6c:9e:51:
96:b4:9f:dd:ad:81:fc:0c:9d:b0:4b:92:f8:57:4c:1b:a8:b5:
af:1d:a5:2f:ee:39:ae:bb:05:75:b5:5a:7c:f8:44:c9:2c:4a:
23:f8:6b:70:55:0a:b4:07:33:4e:c3:b4:65:8b:49:60:d1:61:
c1:b4:78:c5:a0:9e:69:c9:f9:9b:22:98:d3:81:48:c1:2a:71:
16:a6:59:ee:8a:c8:6d:77:d9:d8:b6:a4:08:6b:a7:3e:c4:95:
15:ab:4f:3f:0b:bc:b1:73:da:50:8a:57:25:5e:41:6b:d4:8d:
b2:14:27:bf:86:8e:4b:03:70:f9:40:64:b7:ba:bf:1a:ca:de:
d0:c5:3a:27:c1:59:eb:b0:28:e8:a6:76:16:28:24:a3:3b:3f:
f7:06:0f:4d:5b:a4:ab:01:8b:a1:de:30:dd:24:09:ca:88:01:
cb:35:9b:64:c6:4f:42:67:cc:48:86:72:5b:73:1b:33:bb:56:
48:3a:90:ea:1a:71:d4:b6:02:89:64:75:f1:21:49:bc:e8:92:
51:81:ad:97
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgISAZM0zvLIWWd7S3z/A5VZyGdAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQxMTE2MTE0OTU4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMzZlMmY4OGU1NmM4NmE0MzZhM2M0YzdhYjc3MGZhNzhiYzY4NmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPnC7sttptT71Cf0gxVMPEhrVdhL
S9qy5sYmqYeZngBBjsx5cUkxIvvXU+YQUmZVj2It8xSy54Y5gGry5BwyEMMK6VjS
hmhI67b0yHqFsf5uVZKBA38VnsXSi4a3+ijEe2pTyzb6mr3BQVQFPZgaNxIlNbA2
YzUW+NhJnq4IGaoEallEG0dNk7ff2xdhNcp9kRis2igi1M0jozbA/LVIFypJz1mK
jeDAV2YpPulVIOh0PIFGInPGAn+My9hKKVOpxFZxzg9UgmAU05/D9rBN/n298Uds
cS3BDbomul6EVR08UvFsVp1hCgwJg6gc1vppOvg/AbTYWNOYkuxjXXcwhQIDAQAB
o4ICmzCCApcwHQYDVR0OBBYEFANuL4jlbIakNqPEx6t3D6eLxobKMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2IyNzc0
NDlmLTMxYjItNDU3OC1hODcyLTRiNmUxMzQwNTA0Zi8wLzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjI3
NzQ0OWYtMzFiMi00NTc4LWE4NzItNGI2ZTEzNDA1MDRmLzAvMDM2RTJGODhFNTZD
ODZBNDM2QTNDNEM3QUI3NzBGQTc4QkM2ODZDQS5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDReUw
DQYJKoZIhvcNAQELBQADggEBAEq7HonSo6QPtHZRALqdeRCiirhguzebed6cA/2v
ZfamVUsyPH3QGF3lrJhnUenyaLTNoGyeUZa0n92tgfwMnbBLkvhXTBuota8dpS/u
Oa67BXW1Wnz4RMksSiP4a3BVCrQHM07DtGWLSWDRYcG0eMWgnmnJ+ZsimNOBSMEq
cRamWe6KyG132di2pAhrpz7ElRWrTz8LvLFz2lCKVyVeQWvUjbIUJ7+GjksDcPlA
ZLe6vxrK3tDFOifBWeuwKOimdhYoJKM7P/cGD01bpKsBi6HeMN0kCcqIAcs1m2TG
T0JnzEiGcltzGzO7Vkg6kOoacdS2AolkdfEhSbzoklGBrZc=
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:15:32 2024 by rpki-client on console-fra.rpki-client.org